diff options
| author | Renato Westphal <renato@opensourcerouting.org> | 2017-06-06 21:24:02 -0300 |
|---|---|---|
| committer | Renato Westphal <renato@opensourcerouting.org> | 2017-06-07 10:32:38 -0300 |
| commit | 316d0ae57bd41f0c5f17a4bdd524b2e76fe38430 (patch) | |
| tree | 0914e70078f40e6dd996a2ada0474a1b13980995 /doc/code | |
| parent | 02deafa69780f4fe759dd351da2f5abe09fdfb78 (diff) | |
ldpd: remove pledge calls
In OpenBSD pledge is a mitigation mechanism used to restrict the syscalls
a program can use, enforcing its correct behavior.
In this port of OpenBSD's ldpd(8), it's hard to run under the same
tight pledge promises because of libfrr and additional components we
introduced, like a zclient in lde. Since ldpd is already privsep'ed,
removing the pledge calls shouldn't be a big compromise security-wise.
Signed-off-by: Renato Westphal <renato@opensourcerouting.org>
Diffstat (limited to 'doc/code')
0 files changed, 0 insertions, 0 deletions